Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/DLRFKaBglju_pbzUG3Yb9E2ETdI.roa
File: DLRFKaBglju_pbzUG3Yb9E2ETdI.roa (raw, json)
Hash identifier: 1qVoQLkb50J4yaYlTqss42yrawVFJaAgUTWaRAQ6l5A=
Subject key identifier: 0C:B4:45:29:A0:60:96:3B:BF:A5:BC:D4:1B:76:1B:F4:4D:84:4D:D2
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 018CC8DE3D31CE654B40E8CBB20581BCF352
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/DLRFKaBglju_pbzUG3Yb9E2ETdI.roa
Signing time: Tue 02 Jan 2024 06:30:56 +0000
ROA not before: Tue 02 Jan 2024 06:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54253
IP address blocks: 185.69.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:3d:31:ce:65:4b:40:e8:cb:b2:05:81:bc:f3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: Jan 2 06:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cb44529a060963bbfa5bcd41b761bf44d844dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7a:15:b2:91:49:d6:f5:83:fe:0e:7d:14:b6:
b9:c7:61:0c:55:92:7b:2d:dc:39:e7:f3:ed:85:9b:
7a:99:c0:46:a7:7c:94:6e:a5:96:ab:1f:78:02:37:
2c:85:24:02:38:33:4e:b9:c8:cd:6d:ea:d4:c0:92:
ab:0b:f5:15:ea:d6:89:41:37:19:00:4a:22:bb:4d:
39:ef:3e:42:2a:f6:b8:08:34:73:37:03:06:e7:51:
54:cf:25:1f:4d:70:d8:7d:d8:5f:70:67:b6:2d:6e:
e3:84:59:5e:8d:5b:d9:f9:af:55:ad:2e:70:c1:b8:
01:95:87:b1:57:cf:78:25:35:1a:b4:e6:ec:c0:87:
d4:0f:db:72:fe:02:18:6a:39:23:22:61:49:57:c3:
37:a3:23:c5:01:1f:01:55:e3:0e:6a:5d:4f:ce:c8:
6e:f6:51:16:cf:bd:2d:5d:b3:08:83:52:6e:a8:24:
bd:d8:17:5b:2d:d6:0f:5d:e5:2b:db:7b:6f:6c:f2:
49:9d:83:85:d5:3d:9a:36:89:76:ce:09:1e:4b:ba:
5b:2b:7e:f8:cd:a9:e0:4d:b7:0c:33:10:6b:f8:45:
13:51:a0:87:b1:e7:37:37:5f:70:0a:f8:ac:18:49:
b4:3b:4e:15:97:60:97:87:05:4d:47:32:97:57:8e:
67:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B4:45:29:A0:60:96:3B:BF:A5:BC:D4:1B:76:1B:F4:4D:84:4D:D2
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/DLRFKaBglju_pbzUG3Yb9E2ETdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.0.0/24
Signature Algorithm: sha256WithRSAEncryption
70:51:35:1b:c1:d1:f5:c1:f7:bb:95:15:73:ae:67:39:39:6b:
51:42:6f:8c:db:81:6c:a2:c3:44:cb:8c:52:2e:b3:4e:a3:f2:
91:cf:ca:bb:2c:56:2e:27:67:39:e8:dd:aa:36:7b:f8:3a:fe:
29:32:a5:e5:9a:19:4a:2e:e6:67:26:a4:af:ab:ee:05:36:55:
e2:95:24:d3:04:80:fd:e4:b1:3f:d8:a8:cc:30:48:43:a6:76:
dd:82:07:df:88:2d:7a:d6:0a:b1:5b:e7:7c:bd:79:7b:02:5d:
83:e8:19:9d:82:c3:b7:bf:e3:a1:f4:29:f4:59:86:c9:03:50:
d1:b7:7e:68:c6:2b:fe:83:86:f9:bf:32:99:53:5f:c6:1d:ba:
65:58:e3:43:64:93:92:53:56:b8:fc:8f:54:c3:96:25:d8:f6:
4e:cf:6d:c6:f2:cf:36:04:75:af:42:41:59:51:73:98:c2:d0:
bc:0b:63:50:60:14:84:66:2e:4b:8f:d1:d1:a9:cb:4d:79:ed:
bc:b9:23:1e:46:26:e9:2f:5c:2a:8b:7b:94:dc:83:15:f2:4e:
8c:0c:b9:47:b0:80:7b:90:f5:eb:4d:82:cf:96:fb:16:e0:9a:
7b:09:9c:96:08:f7:22:e8:d7:62:37:a9:14:08:78:4f:83:d5:
f8:a8:d1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:55 2024 by rpki-client on console.sobornost.net